Storage system, coordination method and program

ABSTRACT

Provided is a storage system capable of avoiding the increase in communication between nodes in the coordination of the file service and the block service. This is a storage system in which a plurality of nodes, which provide a file service for performing I/O in file units and a block service for performing I/O in block units, are connected via a network, and the storage system comprises a management unit which manages the first file processing unit and the second file processing unit as a pair, sets the first file processing unit to be operable, manages the first block processing unit and the second block processing unit as a pair, and sets the first block processing unit to be operable.

CROSS-REFERENCE TO RELATED APPLICATION

The present application claims priority from Japanese applicationJP2020-130800, filed on Jul. 31, 2020, the contents of which is herebyincorporated by reference into this application.

TECHNICAL FIELD

The present invention generally relates to communication between nodesin a storage system.

BACKGROUND ART

Conventionally, known is a storage system which places a VM (FSVM: FileServer Virtual Machine) for providing a file service on each physicalserver, and thereby uses the FSVM to build a virtual scale out fileserver. Furthermore, known is a storage system which places a CVM(Controller Virtual Machine), as a back-end of the FSVM, for providing ablock service on each physical server, and thereby builds a virtualscale out block storage (refer to PTL 1).

CITATION LIST Patent Literature

-   [PTL 1] Specification of U.S. patent Ser. No. 10/095,506

SUMMARY OF THE INVENTION Problems to be Solved by the Invention

With the storage system described in PTL 1, there are cases where thephysical server comprising the FSVM differs from the physical servercomprising the CVM as the back-end of the FSVM. In the foregoing case,the communication overhead between the physical servers will increase,and the performance of access in file units (this is hereinafterreferred to as the “file access”) will deteriorate. With respect to thispoint, while it may be possible to avoid the foregoing deterioration inperformance by adopting a high-speed network as the network between thephysical servers, such a high-speed network is generally expensive.

The present invention was devised in view of the foregoing points, andan object of this invention is to propose a storage system and the likecapable of avoiding the increase in communication between nodes in thecoordination of the file service and the block service.

Means to Solve the Problems

In order to achieve the foregoing object, the present invention providesa storage system in which a plurality of nodes, which provide a fileservice for performing I/O (Input/Output) in file units and a blockservice for performing I/O in block units, are connected via a network,comprising: a first node configured by including a first storage devicewhich stores data, a first file processing unit which receives a fileI/O request from a file client and converts the file I/O request into ablock I/O request in the file service, and a first block processing unitwhich performs processing for executing I/O to the first storage devicebased on the block I/O request in the block service; a second nodeconfigured by including a second storage device which stores data, asecond file processing unit which receives a file I/O request from afile client and converts the file I/O request into a block I/O requestin the file service, and a second block processing unit which performsprocessing for executing I/O to the second storage device based on theblock I/O request in the block service; and a management unit whichmanages the first file processing unit and the second file processingunit as a pair, sets the first file processing unit to be operable,manages the first block processing unit and the second block processingunit as a pair, and sets the first block processing unit to be operable.

In the foregoing configuration, by configuring each file processing unitand each block processing unit as a pair and placing such pair in thesame physical node, internal communication will be performed between thefile processing unit and the block processing unit, and the number ofcommunications between the nodes can be suppressed in the coordinationof the file service and the block service.

Advantageous Effects of the Invention

According to the present invention, it is possible to realize a highlyconvenient storage system. Objects, configurations and effects otherthan those described above will become apparent based on the followingdescription of embodiments.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is a diagram showing an example of the configuration of thestorage system according to the first embodiment.

FIG. 2 is a diagram showing an example of the hardware configuration ofthe node according to the first embodiment.

FIG. 3 is a diagram showing an example of the software configuration ofthe node according to the first embodiment.

FIG. 4 is a diagram showing an example of the inter-cluster DB accordingto the first embodiment.

FIG. 5 is a diagram showing an example of the management unitinformation according to the first embodiment.

FIG. 6 is a diagram showing an example of the storage control unitinformation according to the first embodiment.

FIG. 7 is a diagram showing an example of the file control unitinformation according to the first embodiment.

FIG. 8 is a diagram showing an example of the placement of the filecontrol unit pair and the storage OS unit pair according to the firstembodiment.

FIG. 9 is a diagram showing an example of the I/O processing duringnormal times according to the first embodiment.

FIG. 10 is a diagram showing an example of the I/O processing during afailure according to the first embodiment.

FIG. 11 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 12 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 13 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 14 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 15 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 16 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 17 is a diagram showing an example of the control flow according tothe first embodiment.

FIG. 18 is a diagram showing an example of the mode in which programsare provided according to the first embodiment.

DESCRIPTION OF EMBODIMENTS (1) First Embodiment

In this embodiment, the configuration, method and the like for achievingthe foregoing object will be explained. Furthermore, in this embodiment,for example, the configuration, method and the like related to theconvenience of the following storage system will also be explained.

With the storage system described in PTL 1, for example, during normaloperation, data of a file handled by a certain FSVM exists in a localstorage accessed by the CVM existing in the same physical node, andaccess via a physical network can be avoided when accessing and readingthe file.

Here, with the data protection method using a CVM, redundant data issuitably distributed and placed in another physical server. Thus, whenviewing the overall data stored in the local storage of a certain CVM,redundant data will be placed in multiple physical servers.

When a certain physical node is blocked in the foregoing situation, thefile service and the block service are succeeded only by normal physicalnodes. Nevertheless, since redundant data has been distributed andplaced in different physical servers, it is necessary to request aseparate physical node to perform I/O processing in response to an I/Orequest from the FSVM after the failure, and the performance of fileaccess will deteriorate.

An embodiment of the present invention is now explained in detail withreference to the appended drawings. The following descriptions andappended drawings are examples for explaining the present invention, andcertain sections have been suitably omitted or simplified for clarifyingthe explanation. Moreover, all combinations of the features explained inthe embodiments are not necessarily essential as the solution of thepresent invention. The present invention is not limited by theembodiments, and any and all application examples that coincide with theconcept of the present invention fall within the technical scope of thepresent invention. Those skilled in the art can perform variousadditions and modifications to the present invention within the scope ofthe present invention. The present invention may also be implemented invarious other modes. Unless specifically limited herein, the respectiveconstituent elements may be singular or plural.

When various types of information are explained below by usingexpressions such as “table”, “chart”, “list”, or “queue”, such varioustypes of information may also be expressed using other data structures.In order to indicate that information is not dependent on a datastructure, expressions such as “XX table” and “XX list” may sometimes bereferred to as “XX information”. Moreover, when expressions such as“identifying information”, “identifier”, “name”, “ID”, or “number” areused upon explaining the subject matter of each type of information,these expressions may be mutually substituted.

Moreover, in the following explanation, while there are cases whereprocessing, which is performed by executing programs, is explained,because a program performs predetermined processing by suitably using astorage resource (for example, a memory) and/or an interface device (forexample, a communication port) as a result of being executed by aprocessor (for example, a CPU (Central Processing Unit)), the subject ofthe processing may also be the processor. Similarly, the subject of theprocessing to be performed by executing programs may be a controller, adevice, a system, a computer, a node, a storage system, a storagedevice, a server, a management computer, a client or a host equippedwith a processor. The subject (for example, a processor) of theprocessing to be performed by executing programs may include a hardwarecircuit which performs a part or all of the processing. For example, thesubject of the processing to be performed by executing programs mayinclude a hardware circuit which executes the encryption or decryptionof data, or the compression and decompression of data. A processoroperates as function parts that realize predetermined functions as aresult of performing operations according to programs. Devices andsystems including a processor are devices and systems including theforegoing function parts.

A program may be installed in a device such as a computer from a programsource. A program source may be, for example, a program distributionserver or a computer-readable storage media. When the program source isa program distribution server, the program distribution server includesa processor (for example, a CPU) and a storage resource, and the storageresource my additionally store a distribution program and the programsto be distributed. Furthermore, as a result of the processor of theprogram distribution server executing the distribution program, theprocessor of the program distribution server may distribute the programsto be distributed to another computer. Moreover, in the followingexplanation, two or more programs may be realized as one program, or oneprogram may be realized as two or more programs.

Note that, in the following explanation, the same number will beassigned to the same constituent element in the drawings, and theexplanation thereof will be omitted. Moreover, when an explanation isprovided without differentiating similar constituent elements, thecommon part (part excluding the branch number) may be used within thereference characters including the branch number, and when anexplanation is provided by differentiating similar constituent elements,the reference characters including the branch number may be used. Forexample, when an explanation is provided without specificallydifferentiating the file clients, the file clients may be collectivelyindicated as “file client 110”, and when an explanation is provided bydifferentiating the individual file clients, the file clients may beindicated as “file client 110-1” and “file client 110-2”. Moreover, whenan explanation is provided by differentiating similar constituentelements, the reference characters of that constituent element may beused, or an ID assigned to that constituent element may be used insubstitute for the reference characters of that constituent element.

FIG. 1 is a diagram showing an example of the configuration of thestorage system 100 according to this embodiment. The storage system 100comprises one or more file clients 110, and a plurality of nodes 120.

The file client 110 and the node 120 are connected via a network switch130. The network switch 130 is an example of a network configured from,for example, a Fibre Channel (FC), Ethernet (registered trademark),InfiniBand, or a wireless LAN (Local Area Network), and is hereinafterreferred to as the “file service network”. The respective nodes 120 areconnected via a network 140. The network 140 is an example of a networkconfigured from, for example, Ethernet (registered trademark),InfiniBand, or a wireless LAN, and is hereinafter referred to as the“back-end network”.

However, the file service network and the back-end network may beconfigured from the same network. Moreover, the respective file clients110 and the respective nodes 120 may also be connected to a managementnetwork other than the file service network and the back-end network.

In the storage system 100, as shown in FIG. 1, configured is a cluster150 for prescribing the area which includes the nodes 120 to undergo afail-over. A plurality of nodes 120 belong to the cluster 150. If afailure occurs in one of the nodes 120 belonging to the cluster 150, theprocessing is taken over by another node 120 belonging to the cluster150. Note that, in the example of FIG. 1, while a case has beenillustrated where only one cluster 150 is set, a plurality of clusters150 may also be set in the storage system 100.

The file client 110 is a general-purpose computer which functions as ahost (higher-level device) relative to the node 120. The file client 110may be a virtual computer such as a virtual machine.

In response to a user's operation or a request from a loaded applicationprogram, the file client 110 sends a read request in file units or awrite request in file units (this is hereinafter referred to as the“file I/O request”) to the node 120. The file I/O request may be arequest which designates the file of the access destination according toa protocol such as a CIFS (Common Internet File System), or an NFS(Network File System).

The node 120 is a general-purpose computer which provides, to the fileclient 110, a storage area for reading and writing data.

FIG. 2 is a diagram showing an example of the hardware configuration ofthe node 120.

The node 120 comprises, as its constituent elements, a CPU 210, a memory220, a plurality of storage devices 230, a first communication device240, and a second communication device 250. The respective constituentelements are connected via an internal network 260. Each node 120comprises one or more of each of the constituent elements.

The CPU 210 is a processor that governs the operational control of theoverall node 120. The memory 220 is configured from a volatilesemiconductor memory such as an SRAM (Static RAM (Random Access Memory))or a DRAM (Dynamic RAM), and is used as a work memory of the CPU 210 fortemporarily storing various programs and necessary data. As a result ofat least one or more CPUs 210 executing the programs stored in thememory 220, various types of processing are executed as the overall node120 as described later.

The storage device 230 is configured from a large capacity, non-volatilestorage device such as an NVMe (Non-Volatile Memory) drive, a SAS(Serial Attached SCSI (Small Computer System Interface)) drive, a SATA(Serial ATA (Advanced Technology Attachment)), an SSD (Solid StateDrive) or an SCM (Storage Class Memory), and provides a storage area tothe file client 110 for reading and writing data.

The first communication device 240 is an interface for the node 120 tocommunicate with the file client 110 via the file service network. Thefirst communication device 240 is configured from, for example, an NIC(Network Interface Card), an FC card, or a wireless LAN card. The firstcommunication device 240 performs protocol control during communicationwith the file client 110. As the communication protocol that goesthrough the file service network, there is, for example, a CIFS and anNFS.

The second communication device 250 is an interface for a node 120 tocommunicate with another node 120 via the back-end network. The secondcommunication device 250 is configured from, for example, an NIC or awireless LAN card. The second communication device 250 performs protocolcontrol during communication with another node 120.

Note that a node 120 (this is hereinafter referred to as the “managementnode”) to be used by an administrator of the storage system 100 (this ishereinafter referred to as the “system administrator”) for managing theconfiguration and making various settings of the storage system 100 mayalso be provided in the storage system 100. The management node givesnecessary instructions to the file client 110 and the node 120 accordingto the system administrator's operations.

FIG. 3 is a diagram showing an example of the software configuration ofthe node 120.

The node 120 comprises a file control unit 310, a storage control unit320, a management unit 330, and a hypervisor 340.

The file control unit 310 is, for example, a VM which provides a fileservice. The file control unit 310 is software which configures acluster (builds a virtual scale out file server) with the file controlunit 310 of another node 120, and performs processing pertaining to thefile service. Note that the nodes 120 belonging to the cluster of thefile service and the nodes 120 belonging to the cluster 150 coincide inwhole or in part.

More specifically, the file control unit 310 performs, for example, filesystem control 310A, file control unit configuration informationmanagement 3108, and block volume access control 310C.

In the file system control 310A, the file control unit 310 performscontrol for engaging in an exchange as the file system, such asdetermining what kind of file system should be provided to the fileclient 110. For example, the file control unit 310 receives a file I/Orequest from the file client 110 via the first communication device 240.Moreover, for example, the file control unit 310 sends, to the fileclient 110, a reply corresponding to the file I/O request (this ishereinafter referred to as the “file I/O reply”) via the firstcommunication device 240.

In the file control unit configuration information management 3108, thefile control unit 310 manages the configuration information (forexample, the file control unit information 430 described later) such aswhat kind of file system is equipped in the file control unit 310, andwhat kind of block volume (logical volume) is recognized by the filecontrol unit 310. For example, the file control unit 310 setsinformation such as the parameters designated by the management unit330.

In the block volume access control 310C, the file control unit 310accesses the block volume based on the file I/O request. For example,the file control unit 310 converts the file I/O request into a readrequest in block units to the block volume or a write request in blockunits to the block volume (this is hereinafter referred to as the “blockI/O request”). The file control unit 310 notifies the block I/O requestto the storage control unit 320 in the self-node 120. Moreover, forexample, the file control unit 310 receives a reply corresponding to theblock I/O request (this is hereinafter referred to as the “block I/Oreply”) from the storage control unit 320.

Here, in the storage system 100, each file control unit 310 mounted inthe node 120 is set, by the management unit 330, as a pair configuringredundancy together with another file control unit 310 placed in anothernode 120. In the following explanation, the foregoing pair is referredto as the “file control unit pair”.

In the file control unit pair, one file control unit 310 is set to astate capable of receiving a file I/O request from the file client 110and processing the file I/O request (state of a currently used system;hereinafter referred to as the “active-type”). The other file controlunit 310 is in a state of not receiving a file I/O request from the fileclient 110 when the node 120 comprising the active-type file controlunit 310 is operating normally, and set to a state capable of receivinga file I/O request from the file client 110 and processing the file I/Orequest (state of a backup system; hereinafter referred to as the“standby-type”) when the node 120 comprising the active-type filecontrol unit 310 is not operating normally.

In the storage system 100, the data accessed by the active-type filecontrol unit 310 and the data accessed by the OS disk of the active-typefile control unit 310 (OS data, log data and other data required as anOS; hereinafter referred to as the “OS disk data”) are made redundant inthe node 120 comprising the standby-type file control unit 310.Furthermore, in storage system 100, if a failure occurs in theactive-type file control unit 310 or the node 120 where the active-typefile control unit 310 has been placed, the standby-type file controlunit 310 is switched to a state capable of receiving and processing thefile I/O request. Consequently, when the active-type file control unit310 is no longer operable, the processing of the file service that wasbeing executed by the active-type file control unit 310 can be takenover by the standby-type file control unit 310 configuring the same filecontrol unit pair.

The storage control unit 320 is, for example, a VM which provides ablock service. The storage control unit 320 is software which configuresa cluster (builds a virtual scale out block storage) with the storagecontrol unit 320 of another node 120, and performs processing pertainingto the block service. The storage control unit 320 may also be softwarewhich functions as a controller of an SDS (Software Defined Storage).Moreover, the storage control unit 320 may include a storage functionfor storing the block volume. As typical examples of the storagefunction, there are, for instance, a local copy function for creatingand managing replications within the storage system 100, a compressionand deduplication function for reducing the amount of data to be stored,and a tier control function for dynamically migrating data between thestorage devices 230 having different I/O performances andcharacteristics, such as between an SSD and an HDD.

More specifically, the storage control unit 320 comprises a front-endcontrol unit 321, a storage OS unit 322, an inter-node data protectioncontrol unit 323, and a storage control unit configuration informationmanagement unit 324.

When a block I/O request is given from the file control unit 310, thefront-end control unit 321 notifies the block I/O request to the storageOS unit 322 in the self-node 120 to execute that block I/O request.

The storage OS unit 322 generates an I/O command corresponding to theblock I/O request, and executes the reading and writing of data from andinto the storage device 230. More specifically, the storage OS unit 322notifies the I/O command to the inter-node data protection control unit323.

Here, in the storage system 100, each storage OS unit 322 mounted on thenode 120 is set, by the management unit 330, as a pair configuringredundancy together with another storage OS unit 322 placed in anothernode 120. In the following explanation, the foregoing pair is referredto as the “storage OS unit pair”.

In the storage OS unit pair, one storage OS unit 322 is set to a statecapable of receiving a block I/O request from the file control unit 310and processing the block I/O request (state of a currently used system;hereinafter referred to as the “active-type”). The other storage OS unit322 is in a state of not receiving a block I/O request from the filecontrol unit 310 when the node 120 comprising the active-type storage OSunit 322 is operating normally, and set to a state capable of receivinga block I/O request from the file control unit 310 and processing theblock I/O request (state of a backup system; hereinafter referred to asthe “standby-type”) when the node 120 comprising the active-type storageOS unit 322 is not operating normally.

In the storage system 100, if a failure occurs in the active-typestorage OS unit 322 or the node 120 where the active-type storage OSunit 322 has been placed, the standby-type storage OS unit 322 isswitched to a state capable of receiving and and processing the blockI/O request. Consequently, when the active-type storage OS unit 322 isno longer operable, the processing of the block service that was beingexecuted by the active-type storage OS unit 322 can be taken over by thestandby-type storage OS unit 322 configuring the same storage OS unitpair.

The storage OS unit 322 performs pool control 322A, block volume control322B, and pool configuration volume access control 322C.

In the pool control 322A, the storage OS unit 322 combines a pluralityof pool configuration volumes and generates a pool (logical volume), andmanages the pool. The pool configuration volume is a logical volume(logical chunk) corresponding to a physical chunk (storage area of apredetermined size) in the storage device 230 of the self-node 120.

In the block volume control 322B, the storage OS unit 322 cuts out aplurality of pages from the pool, generates a block volume to which oneor more pages have been assigned, and manages the block volume. Theblock volume is a virtual logical volume according to thin provisioning.

In the pool configuration volume access control 322C, the storage OSunit 322 accesses the pool configuration volume based on the block I/Orequest. In order to access the pool configuration volume, the storageOS unit 322 generates an I/O command in pool configuration volume unitsfrom the block I/O request (converts a block volume address into a poolconfiguration volume address), and notifies the I/O command to theinter-node data protection control unit 323. Note that, in the I/Ocommand, the pool configuration volume of the I/O destination and theinternal address of the pool configuration volume are designated.

The inter-node data protection control unit 323 reads and writes datafrom and into the storage device 230 based on the I/O command. Morespecifically, the inter-node data protection control unit 323 performspool configuration volume control 323A, data redundancy management 323B,disk access control 323C, and inter-node communication control 323D.

In the pool configuration volume control 323A, the inter-node dataprotection control unit 323 generates a pool configuration volume, andmanages the pool configuration volume. The inter-node data protectioncontrol unit 323 assigns a physical storage area, which is provided bythe storage device 230 in the self-node 120, to the storage OS unit 322placed in the self-node 120.

In the data redundancy management 323B, the inter-node data protectioncontrol unit 323 makes the data redundant between the nodes 120. Forexample, when the file I/O request is a write request in file units, theinter-node data protection control unit 323 makes redundant the data inthe node 120 comprising the standby-type storage OS unit 322. Moreover,for example, when the file I/O request is a read request in file unitsand it is not possible to access the storage device 230 of the self-node120, the inter-node data protection control unit 323 reads the data fromthe node 120 comprising the standby-type storage OS unit 322.

In the disk access control 323C, the inter-node data protection controlunit 323 determines in which physical chunk the data to be I/O islocated, and reads and writes the data from and into the storage device230. For example, when the inter-node data protection control unit 323receives an I/O command from the storage OS unit 322, the inter-nodedata protection control unit 323 refers to a management table (notshown), and identifies the storage device 230 providing one physicalchunk among the respective physical chunks associated with the poolconfiguration volume designated in the I/O command. Subsequently, theinter-node data protection control unit 323 executes the I/O of the datastored in the pool configuration volume designated in the I/O commandand the address of the physical chunk corresponding to the internaladdress of that pool configuration volume in the identified storagedevice 230.

In the inter-node communication control 323D, the inter-node dataprotection control unit 323 controls the communication between the nodes120. For example, when the I/O command received from the storage OS unit322 is a write command instructing the writing of data into the storagedevice 230, the inter-node data protection control unit 323 sends awrite command to the inter-node data protection control unit 323 of thenode 120 comprising the standby-type storage OS unit 322. The storagecontrol unit 320 comprising the standby-type storage OS unit 322 writesdata into the storage device 230 of the self-node 120 based on thereceived write command.

The storage control unit configuration information management unit 324manages the configuration information (for example, the storage controlunit information 420 described later) such as the placement of redundantdata, accessibility to the storage device 230, what kind of physicalchunk is equipped in the storage device 230, to which pool configurationvolume the physical chunk has been assigned, what kind of poolconfiguration volume is equipped in the pool, and to which block volumethe pages cut out from the pool have been assigned. Note that theconfiguration information of the pool, the block volume and the like aremanaged in storage OS pair units. In other words, by creating a pool, ablock volume and the like in the active-type node 120 and registeringthe configuration information thereof in the inter-cluster DB 400, theconfiguration information can also be reflected in the standby-type node120 during a fail-over.

The management unit 330 is software which has a function of executingthe control processing of the overall cluster 150, and the controlprocessing related to the scale out of the cluster 150. In the storagesystem 100, one management unit 330 among the management units 330respectively mounted in each of the nodes 120 in the cluster 150 is setas a master, and only the management unit 330 set as the master executesthe various types of control processing while maintaining theconsistency of the overall cluster 150.

The management units 330 other than the master management unit 330 areset to one of the operation modes, specifically, either the Hot standbymode or the Warm standby mode, in preparation for a failure of themaster management unit 330.

The Hot standby mode is an operation mode which, when a failure occursin the master management unit 330 or the node 120 comprising the mastermanagement unit 330, maintains the activated standby state so that theprocessing that was being executed by the master management unit 330 canbe immediately taken over.

The management units 330 in the Hot standby mode retain the managementinformation of the same contents as all management information (forexample, the inter-cluster DB 400 described later) managed by the mastermanagement unit 330, such as the file control unit pair table 510 andthe storage OS unit pair table 520 described later, so that they canimmediately take over the processing that was being executed by themaster management unit 330.

Furthermore, when the management information retained by the mastermanagement unit 330 is updated, the difference before and after suchupdate is given, as difference data, to all management units 330 in theHot standby mode from the master management unit 330 via the back-endnetwork, and the management information retained by those managementunits 330 is updated by those management units 330 in the same manner asthe management information retained by the master management unit 330based on the difference data.

As a result of the management units 330 in the Hot standby modeconstantly retaining the same management information as the mastermanagement unit 330, even if a failure occurs in the master managementunit 330 and a management unit 330 which was previously in the Hotstandby mode is switched to a “master”, the control processing that wasbeing executed by the original master management unit 330 can be takenover by the master management unit 330 that was switched to a “master”.

Moreover, the Warm standby-type is an operation in a deactivated standbystate. When the number of master management units 330 set to the Hotstandby mode becomes equal to or less than a predetermined threshold,the state of one of the management units 330 set to the Warmstandby-type is switched to the Hot standby mode.

Note that, in order to prevent a state where two or more mastermanagement units 330 exist, three or more management units 330 areoperated, and the master management unit 330 is selected based onmajority decision among the operated management units 330. Subsequently,the remainder of the operated management units 330 are set to the Hotstandby mode.

More specifically, the management unit 330 performs file controlunit-storage control unit block volume assignment control 330A, filecontrol unit-storage OS unit configuration management control 330B, andfail-over control 330C.

In the file control unit-storage control unit block volume assignmentcontrol 330A, the management unit 330 performs control for determiningwhich block volume should be assigned to which file control unit 310.

In the file control unit-storage OS unit configuration managementcontrol 330B, the management unit 330 performs control pertaining to thefile control unit pair and the storage OS unit pair.

For example, the management unit 330 sets a file control unit pair inthe cluster 150 according to the instruction from the management node,and manages the set file control unit pair by registering it in the filecontrol unit pair table 510 described later. Moreover, for example, themanagement unit 330 sets a storage OS unit pair in the cluster 150according to the instruction from the management node, and manages theset storage OS unit pair by registering it in the storage OS unit pairtable 520 described later.

Moreover, for example, the management unit 330 performs control fordetermining which file control unit pair should be combined with whichstorage OS unit pair. More specifically, the management unit 330determines the combination of the file control unit pair and the storageOS unit pair (this is hereinafter referred to as the “redundancy group”)so that the active-type file control unit 310 and the active-typestorage OS unit 322 are placed in the same node 120, and thestandby-type file control unit 310 and the standby-type storage OS unit322 are placed in the same node 120.

In the fail-over control 330C, if a failure occurs in the node 120, themanagement unit 330 causes the file control unit 310 and the storagecontrol unit 320 to fail over. For example, the management unit 330instructs the standby-type storage OS unit 322 to take over theprocessing from the active-type storage OS unit 322, and thereafterinstructs the standby-type file control unit 310 to take over theprocessing from the active-type file control unit 310.

Note that the management unit 330 may be provided in the managementnode, or included in the file control unit 310, or included in thestorage control unit 320.

The hypervisor 340 is software for operating the file control unit 310,the storage control unit 320, and the management unit 330.

FIG. 4 is a diagram showing an example of the inter-cluster DB 400. Theinter-cluster DB 400 stores information required in units of the cluster150. The inter-cluster DB 400 may be replicated and provided in all ofthe nodes 120, or provided in one or more management nodes.

The inter-cluster DB 400 stores management unit information 410, storagecontrol unit information 420, and file control unit information 430.

The management unit information 410 includes file control unit pairinformation, storage OS unit pair information, a file controlunit-storage OS unit hypervisor, and node state information. Themanagement unit information 410 will be described later with referenceto FIG. 5.

The storage control unit information 420 includes block volumeinformation, connection destination file control unit information,redundant data placement information, and redundant data accessibilityinformation. The storage control unit information 420 will be describedlater with reference to FIG. 6.

The file control unit information 430 includes file system information,and recognized block volume information. The file control unitinformation 430 will be explained later with reference to FIG. 7.

FIG. 5 is a diagram showing an example of the management unitinformation 410.

The management unit information 410 includes a file control unit pairtable 510, a storage OS unit pair table 520, a file control unit-storageOS unit correspondence table 530, and a node state table 540.

The file control unit pair table 510 is an example of the file controlunit pair information, and stores information indicating with whichnodes 120 the file control unit pair is configured. To put itdifferently, the file control unit pair table 510 stores placementinformation indicating in which node 120 the active-type file controlunit 310 has been placed, and in which node 120 the standby-type filecontrol unit 310 has been placed. More specifically, the file controlunit pair table 510 stores information in which a file control unit ID511, an active node 512, and a standby node 513 are associated.

The file control unit ID 511 is information for identifying the filecontrol unit pair. The active node 512 is information indicating inwhich node 120 the active-type file control unit 310 of the file controlunit pair has been provided. The standby node 513 is informationindicating in which node 120 the standby-type file control unit 310 ofthe file control unit pair has been provided.

The storage OS unit pair table 520 is an example of the storage OS unitpair information, and stores information indicating with which nodes 120the storage OS unit pair is configured. To put it differently, thestorage OS unit pair table 520 stores placement information indicatingin which node 120 the active-type storage OS unit 322 has been placed,and in which node 120 the standby-type storage OS unit 322 has beenplaced. More specifically, the storage OS unit pair table 520 storesinformation in which a storage OS unit ID 521, an active node 522, and astandby node 523 are associated.

The storage OS unit ID 521 is information for identifying the storage OSunit pair. The active node 522 is information indicating in which node120 the active-type storage OS unit 322 of the storage OS unit pair hasbeen provided. The standby node 523 is information indicating in whichnode 120 the standby-type storage OS unit 322 of the storage OS unitpair has been provided.

The file control unit-storage OS unit correspondence table 530 is anexample of the file control unit-storage OS unit correspondenceinformation, and stores information indicating the correspondencerelation of the file control unit 310 and the storage OS unit 322. Morespecifically, the file control unit-storage OS unit correspondence table530 stores information in which a file control unit ID 531 and a storageOS unit ID 532 are associated.

The file control unit ID 531 is information for identifying the filecontrol unit 310. The storage OS unit ID 532 is information foridentifying the storage OS unit 322 that is forming a pair with the filecontrol unit 310.

The node state table 540 is an example of the node state information,and stores information indicating the state of the node 120. Morespecifically, the node state table 540 stores information in which anode ID 541 and a state 542 are associated.

The node ID 541 is information for identifying the node 120. The state542 is information indicating the state (“normal” or “blocked”) of thenode 120.

FIG. 6 is a diagram showing an example of the storage control unitinformation 420.

The storage control unit information 420 includes a block volume table610, a connection destination file control unit table 620, and aredundant data accessibility table 630.

The block volume table 610 is an example of the block volumeinformation, and stores information pertaining to the block volumeprovided by the storage control unit 320. More specifically, the blockvolume table 610 stores information in which a block volume ID 611, astorage OS unit ID 612, a WWID (World Wide ID) 613, a capacity 614, andan access file control unit ID 615 are associated.

The block volume ID 611 is information for identifying the block volume.The storage OS unit ID 612 is information for identifying the storage OSunit 322 comprising the block volume. The WWID 613 is informationrequired for accessing the block volume based on the file I/O request,and is information for uniquely identifying the block volume. Thecapacity 614 is information indicating the capacity of the block volume.The access file control unit ID 615 is information for identifying thefile control unit 310 to access the block volume.

The connection destination file control unit table 620 is an example ofthe connection destination file control unit information, and storesinformation of the file control unit 310 connected as a client of thestorage control unit 320. The connection destination file control unittable 620 stores information in which a file control unit ID 621, astorage OS unit ID 622, and an initiator 623 are associated.

The file control unit ID 621 is information for identifying the filecontrol unit 310. The storage OS unit ID 622 is information foridentifying the storage OS unit 322 providing the block service to thefile control unit 310. The initiator 623 is information for identifyingthe module of the connection destination of the block I/O path, or theissuing source of the I/O request (for example, this is the firstcommunication device 240, and may be either a hardware module or aprogram module). For example, the initiator 623 is used when thecommunication between the file control unit 310 and the storage controlunit 320 is to be conducted using an iSCSI (Internet Small ComputerSystem Interface).

The redundant data accessibility table 630 is an example of theredundant data accessibility information, and stores informationindicating whether or not access (I/O) to the redundant data ispossible. More specifically, the redundant data accessibility table 630stores information in which a redundancy group ID 631, a firstconstituent element 632, and a second constituent element 633 areassociated.

The redundancy group ID 631 is information for identifying theredundancy group. The first constituent element 632 is informationindicating the first constituent element of the redundancy group. Thefirst constituent element 632 includes, for example, information foridentifying the storage device 230 as the first constituent element ofthe redundancy group, and information indicating whether or not accessto the storage device 230 is possible. The second constituent element633 is information indicating the second constituent element of theredundancy group. The second constituent element 633 includes, forexample, information for identifying the storage device 230 as thesecond constituent element of the redundancy group, and informationindicating whether or not access to the storage device 230 is possible.

FIG. 7 is a diagram showing an example of the file control unitinformation 430.

The file control unit information 430 includes a file system table 710,and a recognized block volume table 720.

The file system table 710 is an example of the file system information,and stores information pertaining to the file service (file system)provided by the file control unit 310. More specifically, the filesystem table 710 stores information in which a file system ID 711, anowner file control unit ID 712, and metadata 713 are associated.

The file system ID 711 is information for identifying the file system.The owner file control unit ID 712 is information for identifying thefile control unit 310 which owns the file system. The metadata 713 isinformation regarding the file system type of the file system.

The recognized block volume table 720 is an example of the recognizedblock volume information, and stores information indicating what kind ofblock volume is being recognized by the file control unit 310. Morespecifically, the recognized block volume table 720 stores informationin which a recognized block volume ID 721, an owner file control unit ID722, a related file system ID 723, a device name 724, and a WWID 725 areassociated.

The recognized block volume ID 721 is information for identifying theblock volume recognized by the file control unit 310. The owner filecontrol unit ID 722 is information for identifying the file control unit310 which owns the block volume. The related file system ID 723 isinformation for identifying the file system associated with the blockvolume. The device name 724 is the device name assigned by the OS of thefile control unit 310, and is the device name used in relation to theblock volume. The WWID 725 is information for uniquely identifying theblock volume. Note that the device name and the WWID are linked by therecognized block volume table 720.

FIG. 8 is a diagram showing an example of the placement of the filecontrol unit pair and the storage OS unit pair.

In the cluster 801 of the file service, the active-type file controlunit 310 and the standby-type file control unit 310 are respectivelyprovided, as a pair, in different nodes 120.

In the example of FIG. 8, with regard to the first file control unit310, an active-type first file control unit 310-1A (this is hereinafterreferred to as the “active file control unit”) and a standby-type firstfile control unit 310-2B (this is hereinafter referred to as the“standby file control unit”) are provided as a pair, in which the activefile control unit is provided in the first node 120-1, and the standbyfile control unit is provided in the second node 120-2.

Moreover, with regard to the second file control unit 310, anactive-type second file control unit 310-2A and standby-type second filecontrol unit 310-3B are provided as a pair, in which the active-typesecond file control unit 310-2A is provided in the second node 120-2,and the standby-type second file control unit 310-3B is provided in thethird node 120-3.

Moreover, with regard to the third file control unit 310, an active-typethird file control unit 310-3A and a standby-type third file controlunit 310-1B are provided as a pair, in which the active-type third filecontrol unit 310-3A is provided in the third node 120-3, and thestandby-type third file control unit 310-1B is provided in the firstnode 120-1.

In the cluster 802 of the block service, the active-type storage OS unit322 and the standby-type storage OS unit 322 are respectively provided,as a pair, in different nodes 120 in correspondence with the filecontrol unit pair.

In the example of FIG. 8, with regard to the first storage OS unit 322,in correspondence with the pair of the active file control unit and thestandby file control unit, an active-type first storage OS unit 322-1A(this is hereinafter referred to as the “active storage OS unit”) and astandby-type first storage OS unit 322-2B (this is hereinafter referredto as the “standby storage OS unit”) are provided as a pair, in whichthe active storage OS unit is provided in the first node 120-1, and thestandby storage OS unit is provided in the second node 120-2.

Moreover, with regard to the second storage OS unit 322, incorrespondence with the pair of the active-type second file control unit310-2A and the standby-type second file control unit 310-3B, anactive-type second storage OS unit 322-2A and a standby-type secondstorage OS unit 322-3B are provided as a pair, in which the active-typesecond storage OS unit 322-2A is provided in the second node 120-2, andthe standby-type second storage OS unit 322-3B is provided in the thirdnode 120-3.

Moreover, with regard to the third storage OS unit 322, incorrespondence with the pair of the active-type third file control unit310-3A and the standby-type third file control unit 310-1B, anactive-type third storage OS unit 322-3A and a standby-type thirdstorage OS unit 322-1B are provided as a pair, in which the active-typethird storage OS unit 322-3A is provided in the third node 120-3, andthe standby-type third storage OS unit 322-1B is provided in the firstnode 120-1.

As described above, in the storage system 100, the file control unit 310and the storage OS unit 322 are both configured as a pair, and placedaccording to the nodes 120. In the file control unit pair and thestorage OS unit pair, as a result of placing their respectiveactive-types in the same node 120 and placing their respectivestandby-types in the same node 120, it is possible to maintain astraight configuration not only during normal times, but also during afail-over.

Here, in the storage system 100, provided are storage devices 230assigned exclusively to the storage control unit 320 (storage devices230 which entrust disk control to the storage control unit 320; forexample, storage devices 230-1A, 230-2A, 230-3A), and storage devices230 which are subject to the access control of the hypervisor 340(system disks and data stores; for example, storage devices 230-1B,230-2B, 230-3B).

In the storage system 100, the OS disk data 811 of the file control unit310 is provided from the storage device 230, which was assigned to thestorage control unit 320, to the storage control unit 320, and the OSdisk data 821 of the storage control unit 320 is provided by thehypervisor 340.

For example, the OS disk data 811 of the active file control unit andthe data 812, 813 in file units provided by the active file control unitexist in the first storage device 230-1A of the same first node 120-1,and are made redundant in the second node 120-2 comprising the standbyfile control unit. Note that, while not shown, the same applies to theOS disk data 811 and the data 812, 813 in file units of other nodes 120.Additionally, the standby-type file control unit 310 can operate as a VMequivalent to the active-type file control unit 310.

Moreover, for example, the OS disk data 821 and the inter-cluster DB 400of the first storage control unit 320-1 are stored in the second storagedevice 230-1B, which is exclusive to the respective nodes 120,separately from the first storage device 230-1A provided to the firstfile control unit 310-1. Note that, while not shown, the same applies tothe OS disk data 821 and the inter-cluster DB 400 of other nodes.Additionally, the standby-type storage OS unit 322 can operate as aprocessing unit of the storage control unit 320 similar to theactive-type storage OS unit 322 by using the information of theinter-cluster DB 400.

FIG. 9 is a diagram showing an example of the I/O processing duringnormal times. In FIG. 9, the I/O processing is explained by taking as anexample a case where a file access request (file I/O request) is givenfrom the file client 110 to the active file control unit.

The active file control unit notifies a block I/O request, via memoryaccess (internal access), to the first storage control unit 320-1comprising the active storage OS unit having a matching pairconfiguration.

The active storage OS unit makes a block access (internal access) to thefirst storage device 230-1A of the self-node 120-1 via the inter-nodedata protection control unit 323. When the block I/O request is a readrequest in block units, the inter-node data protection control unit 323reads data from the first storage device 230-1A of the self-node 120-1.When the block I/O request is a write request in block units, theinter-node data protection control unit 323 writes data into the firststorage device 230-1A of the self-node 120-1, and instructs the secondstorage control unit 320-2 comprising the standby storage OS unit towrite data via the back-end network.

FIG. 10 is a diagram showing an example of the I/O processing during afailure (after a fail-over). In FIG. 10, the I/O processing is explainedby taking as an example a case where a file access request (file I/Orequest) is given from the file client 110 to the standby file controlunit. Note that, as a result of the standby file control unit enablingthe IP address and starting its operation, the access destination of thefile access is transferred from the active file control unit to thestandby file control unit.

When the standby file control unit takes over the processing pertainingto the file service, and the standby storage OS unit takes over theprocessing pertaining to the storage service, access (I/O) will be madeto the third storage device 230-2A under their control.

FIG. 11 is a diagram showing an example of the control flow for creatinga combination (redundancy group) of the file control unit pair and thestorage OS unit pair.

In S1101, the management unit 330 determines what kind of redundancygroup can be formed during the installation of the storage system 100,and stores information of the determined redundancy group in theinter-cluster DB 400. More specifically, the management unit 330 stores,in the inter-cluster DB 400, the storage OS unit pair information, thefile control unit pair information, and the file control unit-storage OSunit correspondence information from the information of the file controlunit pair and the storage control unit pair determined as the redundancygroup.

For example, when the system administrator designates the nodes 120belonging to the cluster 150, the management unit 330 determines aredundancy group so that the respective nodes 120 that were designatedcan be provided equally (for example, two each). Note that the method offorming a redundancy group from a plurality of nodes 120 is not limitedto being equal, and does not have to be equal. The expression “does nothave to be equal” means, for example, the redundancy group maybedetermined according to the designation of the system administrator, orthe redundancy group may be determined according to the capacity of thestorage device 230 (for example, more redundancy groups are determinedfor nodes 120 having a greater total capacity).

In S1102, the management unit 330 sets the file control unit pairinformation in the file control unit 310. Consequently, the file controlunit 310 can recognize the ID assigned to the self-file control unit310, and recognize the file control unit 310 on the other end of thefile control unit pair.

In S1103, the file control unit 310 sends a notice (reply) to themanagement unit 330 to the effect that the setting of the file controlunit pair information is complete.

In S1104, the management unit 330 sets the storage OS unit pairinformation in the storage control unit 320. Consequently, the storagecontrol unit 320 can recognize the ID assigned to the self-storagecontrol unit 320, and recognize the storage OS unit 322 on the other endof the storage OS unit pair.

In S1105, the file control unit 310 sends a notice (reply) to themanagement unit 330 to the effect that the setting of the storage OSunit pair information is complete.

FIG. 12 is a diagram showing an example of the control flow for creatinga file system. In this control flow, for example, the capacity of thepool of each storage control unit 320 is acquired, and the block volumeis assigned so that the free space of the pools will be equal. Note thatthis control flow is started when a user instruction is given from thesystem administrator. The user instruction may include information suchas the type of file system that the system administrator wishes tocreate, or information capable of identifying the file control unit pairand the storage OS unit pair to be processed (pair of the storagecontrol units 320).

In S1201, the management unit 330 makes an inquiry to each storagecontrol unit 320 regarding how much capacity there is as the pools, andacquires free space. Note that the storage control unit 320 includesinformation regarding the pools such as what kind of storage device 230is connected, and how many pools can be formed.

In S1202, the management unit 330 determines how many block volumes areto be created, and gives a block volume creation instruction to eachstorage control unit 320.

In S1203, the storage control unit 320 comprising the active-typestorage OS unit 322 creates a block volume.

In S1204, the storage control unit 320 comprising the active-typestorage OS unit 322 sets the information pertaining to the created blockvolume (block volume information) in the inter-cluster DB 400.

In S1205, the storage control unit 320 comprising the active-typestorage OS unit 322 sends a notice (reply) to the management unit 330 tothe effect that the block volume has been created.

In S1206, the management unit 330 notifies the file control unit-storageOS unit correspondence information to the storage control unit 320comprising the active-type storage OS unit 322, and gives an instructionto set the connection destination file control unit information. Inother words, since to which file control unit 310 the block volumeshould be assigned can be determined from the file control unit-storageOS unit correspondence information, the management unit 330 gives aninstruction to the storage control unit 320 to assign the block volumeto the active-type file control unit 310 to become a client of thestorage control unit 320.

In S1207, the storage control unit 320 comprising the active-typestorage OS unit 322 generates the connection destination file controlunit information based on the file control unit-storage OS unitcorrespondence information, and sets the connection destination filecontrol unit information in the inter-cluster DB 400.

In S1208, the storage control unit 320 comprising the active-typestorage OS unit 322 sends a notice (reply) to the management unit 330 tothe effect that the setting of the connection destination file controlunit information is complete.

In S1209, the management unit 330 gives an instruction to the storagecontrol unit 320 comprising the active-type storage OS unit 322 to set apath in the newly created block volume.

In S1210, in order to set a path in the new block volume provided by thestorage control unit 320, the storage control unit 320 comprising theactive-type storage OS unit 322 associates the block volume and the filecontrol unit 310 to access the block volume, generates block volumeinformation which designates the block volume ID of the block volume andthe access file control unit ID of the file control unit 310, and setsthe generated block volume information in the inter-cluster DB 400.

In S1211, the storage control unit 320 comprising the active-typestorage OS unit 322 sends a notice (reply) to the management unit 330 tothe effect that the path has been set.

Based on the foregoing processing, as a result of the block volumeprovided by the storage control unit 320 comprising the active-typestorage OS unit 322 being created and a path being set in the blockvolume provided by the storage control unit 320, the storage controlunit 320 enters an operable state. Note that, as a result of a pathbeing set in the block volume, access from the file control unit 320(initiator) corresponding to the access file control unit ID, which isset for each block volume, is permitted.

In S1212, the management unit 330 gives an instruction to theactive-type file control unit 310 to recognize the created block volume.

In S1213, the active-type file control unit 310 recognizes (detects) thecreated block volume. Consequently, the block volume provided by thestorage control unit 320 becomes visible on the OS as a volume of thefile control unit 310.

In S1214, the active-type file control unit 310 sets the recognizedblock volume information in the inter-cluster DB 400.

In S1215, the active-type file control unit 310 sends a notice (reply)to the management unit 330 to the effect that the setting of therecognized block volume information is complete.

In S1216, the management unit 330 gives an instruction to theactive-type file control unit 310 to create a file system, which wasdesignated in the user instruction, in the recognized block volume.

In S1217, the active-type file control unit 310 executes a predeterminedcommand, and creates a file system in the recognized block volume.

In S1218, the active-type file control unit 310 sets the file systeminformation of the created file system in the inter-cluster DB 400.

In S1219, the active-type file control unit 310 sends a notice (reply)to the management unit 330 to the effect that the setting of the filesystem information is complete.

Based on the foregoing processing, as a result of the block volumeprovided by the storage control unit 320 comprising the active-typestorage OS unit 322 being created and a file system being created in theblock volume, the file control unit 320 enters an operable state.

FIG. 13 is a diagram showing an example of the control flow of the readprocessing during normal times. In FIG. 13, the read processing isexplained by taking as an example a case where a read request in fileunits is given from the file client 110 to the active file control unit.

In S1301, the active file control unit receives a read request in fileunits from the file client 110.

In S1302, the active file control unit performs a request conversion.More specifically, the active file control unit refers to a table (notshown) which associates the file and the block (storage location) in theblock volume, identifies with which block the file corresponds, andconverts a read request in file units into a read request in blockunits.

In S1303, the active file control unit notifies the read request inblock units to the first storage control unit 320-1 comprising theactive storage OS unit.

In S1304, the first storage control unit 320-1 performs accessibilitydetermination. More specifically, the first storage control unit 320-1refers to the record corresponding to the redundancy group to which theactive file control unit and the active storage OS unit belong by usingthe redundant data accessibility table 630, and determines theaccessibility of the first constituent element of the record. When theaccessibility of the first constituent element of the record is“accessible”, the first storage control unit 320-1 identifies thestorage device 230 prescribed in the first constituent element, anddetermines that access is “possible”. When the accessibility of thefirst constituent element of the record is “not accessible”, the firststorage control unit 320-1 determines the accessibility of the secondconstituent element. When the accessibility of the second constituentelement is “accessible”, the first storage control unit 320-1 identifiesthe storage device 230 prescribed in the second constituent element, anddetermines that access is “possible”. When the accessibility of thesecond constituent element is “not accessible”, the first storagecontrol unit 320-1 identifies that there is no storage device 230 thatcan be accessed (read) (error), and determines that access is “notpossible”.

For example, when the active file control unit and the active storage OSunit belong to “redundancy group 1”, the first storage control unit320-1 refers to the redundant data accessibility table 630, anddetermines that the first storage device 230-1A can be accessed.

In S1305, the first storage control unit 320-1 reads data from thestorage device 230 in which access is determined to be “possible”. Inthis example, since access to the first storage device 230-1A is“possible”, the first storage control unit 320-1 reads data (local read)from the first storage device 230-1A.

In S1306, the first storage control unit 320-1 sends the read data inblock units (this is hereinafter referred to as the “block data”), and anotice (block I/O reply) to the active file control unit to the effectthat the reading is complete.

In S1307, the active file control unit performs data conversion. In thedata conversion, the block data is converted into data in file units(this is hereinafter referred to as the “file data”).

In S1308, the active file control unit sends the file data, and a notice(file I/O reply) to the file client 110 to the effect that the readingis complete.

FIG. 14 is a diagram showing an example of the control flow of the writeprocessing during normal times. In FIG. 14, the write processing isexplained by taking as an example a case where a write request in fileunits is given from the file client 110 to the active file control unit.

In S1401, the active file control unit receives a write request in fileunits from the file client 110.

In S1402, the active file control unit performs a request conversion.More specifically, the active file control unit refers to a table (notshown) which associates the file and the block (storage location) in theblock volume, identifies with which block the file corresponds, andconverts a write request in file units into a write request in blockunits.

In S1403, the active file control unit notifies the write request inblock units to the first storage control unit 320-1 comprising theactive storage OS unit.

In S1404, the first storage control unit 320-1 performs accessibilitydetermination. More specifically, the first storage control unit 320-1refers to the record corresponding to the redundancy group to which theactive file control unit and the active storage OS unit belong by usingthe redundant data accessibility table 630, and determines theaccessibility of the first constituent element of the record. When theaccessibility of the first constituent element of the record is“accessible”, the first storage control unit 320-1 identifies thestorage device 230 prescribed in the first constituent element, anddetermines that access is “possible”. Moreover, the first storagecontrol unit 320-1 determines the accessibility of the secondconstituent element. When the accessibility of the second constituentelement is “accessible”, the first storage control unit 320-1 identifiesthe storage device 230 prescribed in the second constituent element, anddetermines that access is “possible”. When the accessibility of thefirst constituent element and/or the accessibility of the secondconstituent element is “not accessible”, the first storage control unit320-1 identifies that there is no storage device 230 that can beaccessed (written) (error), and determines that access is “notpossible”.

For example, when the active file control unit and the active storage OSunit belong to “redundancy group 1”, the first storage control unit320-1 refers to the redundant data accessibility table 630, anddetermines that the first storage device 230-1A and the third storagedevice 230-2A can be accessed.

In S1405 and S1406, the first storage control unit 320-1 writes datainto the storage device 230 in which access is determined to be“possible”. In this example, since access to the first storage device230-1A is “possible”, the first storage control unit 320-1 writes data(local write) into the first storage device 230-1A (S1405). Moreover,since access to the third storage device 230-2A is “possible”, the firststorage control unit 320-1 sends a write command in pool configurationvolume units to the second storage control unit 320-2 comprising thestandby storage OS unit in order to write data (redundant write) intothe third storage device 230-2A of the second node 120-2 (S1406).

In S1407, the second storage control unit 320-2 writes data (localwrite) into the third storage device 230-2A.

In S1408, the second storage control unit 320-2 sends a notice (reply)to the first storage control unit 320-1 comprising the active storage OSunit to the effect that the writing in the third storage device 230-2Ais complete.

In S1409, the first storage control unit 320-1 sends a notice (block I/Oreply) to the active file control unit to the effect that the writing ofdata in block units is complete.

In S1410, the active file control unit sends a notice (file I/O reply)to the file client 110 to the effect that the writing of data in fileunits is complete.

FIG. 15 is a diagram showing an example of the control flow of afail-over when a failure occurs in the first node 120-1. Note that thereis no particular limitation in the detection of the nodes 120 thatencountered a failure. The self-node 120 may detect the failure, anothernode 120 may detect the failure, the management node may detect thefailure, or the failure may be detected based on other means.

In S1501, the management unit 330 updates the management unitinformation 410 of the inter-cluster DB 400. More specifically, themanagement unit 330 changes the state 542 of the record, in which thenode ID 541 of the node state table 540 is “Node 1”, from “normal” to“blocked”.

In S1502 and S1503, the management unit 330 identifies the file controlunit 310 and the storage control unit 320 to be subject to a fail-over.

More specifically, the management unit 330 refers to the storage OS unitpair table 520 and searches for a record in which the active node 522 is“Node 1”, and identifies the storage OS unit ID 521 “storage OS unit 1”and the standby node 523 “Node 2” (standby storage OS unit) of thatrecord. Moreover, the management unit 330 refers to the file controlunit pair table 510 and searches for a record in which the active node512 is “Node 1”, and identifies the file control unit ID 511 “filecontrol unit 1” and the standby node 513 “Node 2” (standby file controlunit) of that record.

In S1504, the management unit 330 gives a fail-over instruction to thesecond storage control unit 320-2 comprising the standby storage OSunit.

In S1505 and S1506, the second storage control unit 320-2 acquires, fromthe storage control unit information 420, the block volume informationand the connection destination file control unit information which werebeing used by the active storage OS unit, creates a block volume in thesame manner as the active storage OS unit, and sets it to a statecapable of I/O to enable the execution of processing pertaining to theblock service.

In S1507, the second storage control unit 320-2 updates the storagecontrol unit information 420. More specifically, the second storagecontrol unit 320-2 refers to the redundant data accessibility table 630of the storage control unit information 420, and identifies a record inwhich the first storage device 230-1A of the first node 120-1 isincluded in the storage device 230 of the first constituent element 632or the second constituent element 633. In this example, the secondstorage control unit 320-2 identifies the record in which the redundancygroup ID 631 is “redundancy group 1”, and the record in which theredundancy group ID 631 is “redundancy group 3”. In the foregoing case,the second storage control unit 320-2 sets the accessibility of thefirst constituent element 632 of the record of “redundancy group 1” to“not accessible”, and sets the accessibility of the second constituentelement 633 of the record of “redundancy group 3” to “not accessible”.

In S1508, the second storage control unit 320-2 sends a notice (reply)to the management unit 330 to the effect that the fail-over of thesecond storage control unit 320-2 is complete.

In S1509, the management unit 330 gives a fail-over instruction to thestandby file control unit.

In S1510 and S1511, the standby file control unit acquires, from thefile control unit information 430, the file system information that wasretained by the active file control unit, and sets it to a state capableof I/O to enable the execution of processing pertaining to the fileservice by detecting the created block volume or creating a file systemin the created block volume.

In S1512, the standby file control unit sends a notice (reply) to themanagement unit 330 to the effect that the fail-over of the active filecontrol unit is complete.

FIG. 16 is a diagram showing an example of the control flow of the readprocessing after the fail-over. In FIG. 16, the read processing isexplained by taking as an example a case where a read request in fileunits is given from the file client 110 to the standby file controlunit.

In S1601, the standby file control unit receives a read request in fileunits from the file client 110.

In S1602, the standby file control unit performs request conversion.Note that, since the request conversion is the same as S1302, theexplanation thereof is omitted.

In S1603, the standby file control unit notifies the read request inblock units to the second storage control unit 320-2 comprising thestandby storage OS unit.

In S1604, the second storage control unit 320-2 performs accessibilitydetermination. Note that, since the accessibility determination is thesame as S1304, the explanation thereof is omitted.

In S1605, the second storage control unit 320-2 reads data from thestorage device 230 in which access is determined to be “possible”. Inthis example, since access to the third storage device 230-2A is“possible”, the second storage control unit 320-2 reads data (localread) from the third storage device 230-2A.

In S1606, the second storage control unit 320-2 sends the block data,and a notice (block I/O reply) to the standby file control unit to theeffect that the reading is complete.

In S1607, the standby file control unit performs data conversion. In thedata conversion, block data is converted into file data.

In S1608, the standby file control unit sends the file data, and anotice (file I/O reply) to the file client 110 to the effect that thereading is complete.

FIG. 17 is a diagram showing an example of the control flow of the writeprocessing after the fail-over. In FIG. 17, the write processing isexplained by taking as an example a case where a write request in fileunits is given from the file client 110 to the standby file controlunit.

In S1701, the standby file control unit receives a write request in fileunits from the file client 110.

In S1702, the standby file control unit performs request conversion.Note that, since the request conversion is the same as S1402, theexplanation thereof is omitted.

In S1703, the standby file control unit notifies the write request inblock units to the second storage control unit 320-2 comprising thestandby storage OS unit.

In S1704, the second storage control unit 320-2 performs accessibilitydetermination. Note that, since the accessibility determination is thesame as S1404, the explanation thereof is omitted. Here, since theredundant data accessibility table 630 has been updated in S1507, thesecond storage control unit 320-2 determines that the third storagedevice 230-2A can be accessed.

In S1705, the second storage control unit 320-2 writes data into thestorage device 230 in which access is determined to be “possible”. Inthis example, since access to the first storage device 230-1A is “notpossible”, and access to the third storage device 230-2A is “possible”,the second storage control unit 320-2 writes data (local write) into thethird storage device 230-2A.

In S1706, the second storage control unit 320-2 sends a notice (blockI/O reply) to the standby file control unit to the effect that thewriting of data in block units is complete.

In S1707, the standby file control unit sends a notice (file I/O reply)to the file client 110 to the effect that the writing of data in fileunits is complete.

In this embodiment, as a result of arranging the file control unit pairand the storage OS unit pair in the same node 120, when a failure occursin the node 120, the respective fail-over destinations will be the samenode 120, and a straight configuration can be maintained.

Moreover, in this embodiment, when applying the node 120 to a personalcomputer or the like, programs related to the foregoing control may beprovided through a recording medium such as a CD-ROM, or through datasignals such as the internet.

FIG. 18 is a diagram showing an example of the mode in which programsare provided.

A personal computer 1800 receives programs via a CD-ROM 1840. Moreover,the personal computer 1800 has a function of connecting to acommunication line 1810. A computer 1820 is a server computer whichprovides the programs, and stores the programs in a recording mediumsuch as a hard disk 1830. The communication line 1810 is the internet, acommunication line for PC communication, or a dedicated communicationline. The computer 1820 reads programs using the hard disk 1830, andsends the programs to the personal computer 1800 via the communicationline 1810. In other words, the computer 1820 sends the programs via thecommunication line 1810 through carrier waves as data signals. Asdescribed above, the programs can be provided as various types ofcomputer-readable computer program products such as recording mediums ordata signals (carrier waves).

(2) Supplementary Explanation

The embodiment described above includes, for example, the followingsubject matter.

While the foregoing embodiment explained a case of applying the presentinvention to a system, the present invention is not limited thereto, andmay also be broadly applied to various other systems, devices, methods,and programs.

Moreover, in the embodiment described above, for example, one function(file control unit 310, storage control unit 320 or the like) of thenode 120 may be separated into a plurality of functions, or a pluralityof functions may be consolidated into one function. Moreover, a part ofthe functions of the node 120 may be provided as a separate function, orincluded in another function. Moreover, a part of the functions of thenode 120 may also be realized with another computer that is communicablewith the node 120.

Moreover, in the embodiment described above, the configuration of therespective tables is merely an example, and one table may be dividedinto two or more tables, and all or a part of two or more tables may beone table.

Moreover, in the foregoing explanation, information such as programs,tables and files that realize the respective functions may be stored ina memory or a storage device such as a hard disk or an SSD (Solid StateDrive), or a recording medium such as an IC card, an SD card, or a DVD.

The embodiment described above includes, for example, the followingcharacteristic configuration.

A storage system (for example, storage system 100) in which a pluralityof nodes (for example, node 120), which provide a file service forperforming I/O (Input/Output) in file units and a block service forperforming I/O in block units, are connected via a network (for example,back-end network), comprising: a first node (for example, first node120-1) configured by including a first storage device (for example,first storage device 230-1A) which stores data, a first file processingunit (for example, active-type first file control unit 310-1A) whichreceives a file I/O request from a file client (for example, file client110) and converts the file I/O request into a block I/O request in thefile service, and a first block processing unit first block processingunit (for example, active-type first storage OS unit 322-1A) whichperforms processing for executing I/O to the first storage device basedon the block I/O request in the block service; a second node (forexample, second node 120-2) configured by including a second storagedevice (for example, third storage device 230-2A) which stores data, asecond file processing unit (for example, standby-type first filecontrol unit 310-2B) which receives a file I/O request from a fileclient (for example, file client 110) and converts the file I/O requestinto a block I/O request in the file service, and a second blockprocessing unit (for example, standby-type first storage OS unit 322-2B)which performs processing for executing I/O to the second storage devicebased on the block I/O request in the block service; and a managementunit (for example, management unit 330) which manages the first fileprocessing unit and the second file processing unit as a pair, sets thefirst file processing unit to be operable, manages the first blockprocessing unit and the second block processing unit as a pair, and setsthe first block processing unit to be operable.

In the foregoing configuration, by configuring each file processing unitand each block processing unit as a pair and placing such pair in thesame physical node, internal communication will be performed between thefile processing unit and the block processing unit, and the number ofcommunications between the nodes can be suppressed in the coordinationof the file service and the block service.

When a failure occurs in the first node, the management unit gives afile processing unit take-over instruction to the second file processingunit for taking over the processing of the first file processing unit(for example, S1504), and gives a block processing unit take-overinstruction to the second block processing unit for taking over theprocessing of the first block processing unit (for example, S1509).

In the foregoing configuration, since internal communication will beperformed between the file processing unit and the block processing uniteven after the fail-over, the number of communications between the nodescan be suppressed in the coordination of the file service and the blockservice, and a situation where the file access performance willdeteriorate can be avoided.

When the block I/O request converted by the first file processing unitis a request for writing data into the first storage device, the firstnode performs processing for writing the data into the first storagedevice (for example, S1405), and additionally sends an instruction tothe second node for writing the data into the second storage device (forexample, S1406).

In the foregoing configuration, since the same data is written into thefirst storage device and the second storage device, high-speed accessleveraging data locality is enabled even after the fail-over.

The management unit gives the file processing unit take-over instructionafter receiving a reply which is in response to the block processingunit take-over instruction and which indicates that the take-over of theprocessing of the first file processing unit is complete (for example,refer to FIG. 15).

In the foregoing configuration, in a state where the take-over of theprocessing of the first block processing unit has not yet been performedby the second block processing unit, a situation where the second fileprocessing unit receives a file I/O request from the file client can beavoided.

Moreover, the configuration described above may be suitably changed,rearranged, combined or omitted to the extent that such change,rearrangement, combination or omission does not exceed the subjectmatter of the present invention.

Items included in a list according to a format of “at least one among A,B, and C” should be understood to mean (A), (B), (C), (A and B), (A andC), (B and C) or (A, B, and C). Similarly, items included in a listaccording to a format of “at least one among A, B, or C” may mean (A),(B), (C), (A and B), (A and C), (B and C) or (A, B, and C).

REFERENCE SIGNS LIST

-   100 . . . storage system, 110 . . . file client, 120 . . . node.

1. A storage system, comprising: a plurality of nodes, which belong to acluster and provide a file service for performing I/O (Input/Output) infile units and a block service for performing I/O in block units, areconnected via a network, each of the nodes configured by including astorage device which stores data, a file processing unit which receivesa file I/O request from a file client via the network and converts thefile I/O request into a block I/O request in the file service, and ablock processing unit which performs processing for executing I/O to thestorage device based on the block I/O request in the block service; amanagement unit configured to manage the file processing units in anytwo of the plurality of nodes and are different from each other as apair, sets the file processing unit of the one node to an active-typeand sets the file processing unit of the other node to a standby-type,manage the block processing units in any two of the plurality of nodesand are different from each other as a pair, sets the block processingunit of the one node to the active-type and sets the block processingunit of the other node to the standby-type, set a combination of thepairs of file processing units and block processing units; wherein basedon the block I/O request converted by the file processing unit of thefile processing unit pair belonging to the combination, the blockprocessing unit of the block processing unit pair belonging to thecombination performs processing for executing I/O to the storage deviceof a corresponding node.
 2. The storage system according to claim 1,wherein: the management unit instructs the block processing unit thatconfigures the block processing unit pair belonging to the combinationto generate a logical volume corresponding to the storage device of thecorresponding node, and to assign the generated logical volume to thefile processing unit that configures the block processing unit pairbelonging to the combination, and the management unit instructs the fileprocessing unit to which the logical volume is assigned to recognize thegenerated logical volume.
 3. The storage system according to claim 1,wherein: the management unit sets the combinations so that the number ofcombinations is equal for each of the nodes that configures the cluster.4. The storage system according to claim 1, wherein: the management unitsets a larger number of combinations as the total capacity of thestorage devices corresponding to each of the nodes that configures thecluster is larger.
 5. The storage system according to claim 1, wherein:the active-type file processing unit of the file processing unit pairand the active-type block processing unit of the block processing unitpair, each of which belongs to the same combination, are placed in thesame node.
 6. The storage system according to claim 5, wherein: thestandby-type file processing unit of the file processing unit pair andthe standby-type block processing unit of the block processing unitpair, each of which belongs to the same combination, are placed in thesame node.
 7. The storage system according to claim 1, wherein: when thefailure occurs in the node where the active-type file processing unit ofthe file processing unit pair belonging to the same combination isplaced, the management unit gives a file processing unit take-overinstruction to the standby-type file processing unit of the same pairfor taking over the processing of the active-type one, and gives a blockprocessing unit take-over instruction to the standby-type blockprocessing unit of the block processing unit pair belonging to the samecombination for taking over the processing of the active-type one. 8.The storage system according to claim 7, wherein: based on the fileprocessing unit takeover instruction, the standby-type file processingunit of the file processing unit pair enables the IP address and startsoperation.
 9. The storage system according to claim 7, wherein: themanagement unit gives the file processing unit take-over instructionafter receiving a reply which is in response to the block processingunit take-over instruction and which indicates that the take-over of theprocessing of the active-type file processing unit is complete.
 10. Amethod of managing a storage system, comprising: a plurality of nodes,which belong to a cluster and provide a file service for performing I/O(Input/Output) in file units and a block service for performing I/O inblock units, are connected via a network, each of the nodes configuredby including a storage device which stores data, a file processing unitwhich receives a file I/O request from a file client via the network andconverts the file I/O request into a block I/O request in the fileservice, and a block processing unit which performs processing forexecuting I/O to the storage device based on the block I/O request inthe block service; and a management unit, the method comprising:managing the file processing units in any two of the plurality of nodesand are different from each other as a pair; setting the file processingunit of the one node to an active-type and setting the file processingunit of the other node to a standby-type; managing the block processingunits in any two of the plurality of nodes and are different from eachother as a pair; setting the block processing unit of the one node tothe active-type and setting the block processing unit of the other nodeto the standby-type; and setting a combination of the pairs of fileprocessing units and block processing units; wherein based on the blockI/O request converted by the file processing unit of the file processingunit pair belonging to the combination, the block processing unit of theblock processing unit pair belonging to the combination performsprocessing for executing I/O to the storage device of a correspondingnode.